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(54) A method of securing an electronic assembly against tampering 


(57) A method for forming a security enclosure com- 
prises folding a flexible tamper respondent cloth around 
an electronic assembly. An adhesive on the inner folded 


surfaces of the cloth temporarily retains the folds. The 
enclosure is then exposed to heat and pressure to pro- 
mote improved adhesion strength of the adhesive, 
thereby improving fold retention. 
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Description 

TECHNICAL FIELD OF THE INVENTION 

[0001] The present invention relates generally to the s 
detection of intrusions into electronic assemblies, and 
more particularly, to the retention of a security enclosure 
capable of detecting such intrusions. 

BACKGROUND OF THE INVENTION 10 

[0002] In electronic network commerce applications, 
it is a requirement to protect the contents of the associ- 
ated computer systems from being unlawfully read or 
modified. It is conventional practice to provide certain 1$ 
encryption schemes in which data is transmitted and re- 
ceived in an encrypted form and only authorized people 
who have the encryption key codes may read or modify 
the data. However, an unauthorized person with suffi- 
cient skills and knowledge may attempt to bypass soft- 20 
ware encryption controls by making a physical attack 
against the computer hardware to attempt a direct inter- 
rogation of the memory components and other devices. 
Defense from these types of attacks requires that 
tamper resistant physical packaging be provided for crit- 25 
ical encryption components, in such a way that unau- 
thorized attempts to gain entry are detected and encryp- 
tion key codes are immediately erased. One means of 
providing physical protection against intrusion is the use 
of an electrical grid surrounding the encryption module, 30 
which when broken triggers the requisite signal to disa- 
ble the unit. It is known in the art to surround and protect 
an encryption module with a membrane consisting of 
one or more flexible dielectric layers having electrically 
conductive traces thereon. The membrane is electrically 35 
connected to the module, then wrapped, folded and 
bonded around the module, wherein a sticky pressure 
sensitive bonding adhesive adheres the membrane 
around the module. The traces are intentionally made 
fragile so that they are damaged if an attempt is made <o 
to remove the membrane. Further the membrane may 
be potted in a molding material, which offers further pro- 
tection as its removal would also damaged the traces. 
[0003] While the membrane must meet the physical 
security requirements, it must not be so sensitive that it <5 
falsely triggers the erasure of the key codes as a result 
of handling during the manufacturing assembly process, 
or subsequently due to environmental conditions asso- 
ciated with changes in temperature, humidity or atmos- 
pheric pressure. Accordingly, one of the drawbacks in so 
the current art is that the security membranes intended 
for wrapping, folding, and bonding to an enclosure may 
be too stiff to readily fold as a result of the thickness and 
other properties of the various layers. As a result, during 
the assembly folding process, a fold may be completed ss 
but the stiffness of the membrane may result in poor re- 
tention of the fold, as the elastic strain energy associat- 
ed with bending the membrane overwhelms the adhe- 
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sive strength of the bonding adhesive. This can result 
in two conditions. First, the unfolding can damage the 
fragile circuit traces as the adhesive pulls against them 
during unfolding of the membrane. Second, unfolding 
can produce the formation of openings or tunnels 
through which the subsequently applied molding mate- 
rials may leak into the interior of the enclosure, resulting 
in the possibility of an immediate failure or potentially a 
reduction in reliability of the internal components. 
[0004] Thus, there is a need for better means for per- 
forming the assembly wrapping, folding, and bonding 
operation in such a way that the membrane is not dam- 
aged, and that molding material can not subsequently 
leak into the interior of the enclosure. Contrary to meet- 
ing this requirement stands the fact that the available 
membrane materials have certain physical properties 
associated with their materials selection and cross-sec- 
tions that can not be readily altered, and further the fact 
the conductive traces are intentionally fragile so as to 
detect any security attack. 

DISCLOSURE OF THE INVENTION 

[0005] Accordingly, the present invention provides a 
method of securing an electronic assembly against tam- 
pering, comprising: wrapping the assembly in a tamper 
respondent sheet to form an enclosure for the assembly; 
providing overlapping portions of the sheet with a heat 
curable adhesive; clamping the enclosed assembly to 
maintain the overlapped portions of the sheet in contact 
with the adhesive; and heating the enclosed assembly 
to heat cure the adhesive thereby to ensure integrity of 
the enclosure. 

[0006] A first embodiment provides a method of form- 
ing a security enclosure, comprising: providing an elec- 
tronic assembly; enclosing the assembly in a tamper re- 
spondent wrap, such that the wrap forms fold lines at a 
first and second end of the assembly; placing the en- 
closed assembly in a fixture, wherein the fixture com- 
prises a base upon which the assembly rests, a first sta- 
tionary arm mounted on the base holding the fold lines 
at the first end of the assembly, a second arm slidably 
mounted on the base, and a traversing mechanism to 
bias the second arm toward the fold lines at the second 
end of the assembly; and heating the enclosed assem- 
bly. 

[0007] A second embodiment provides a method of 
producing a tamper respondent enclosure, comprising: 
enclosing a cryptographic processor in a tamper re- 
spondent sheet, wherein an adhesive material secures 
the enclosure; holding the enclosed cryptographic proc- 
essor such that the adhesive material remains intact; 
and applying heat to the enclosed cryptographic proc- 
essor to strengthen the adhesive material. 
[0008] A third embodiment provides a method of form- 
ing a security enclosure, comprising: providing a circuit 
card; enclosing the card in a tamper respondent cloth, 
wherein an adhesive secures fold lines of the cloth; hold- 
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ing the fold lines of the cloth to maintain adhesive con- 
tact; and heating the enclosed card. 
[0009] A fourth embodiment provides a method of as- 
sembling a security enclosure comprising: providing a 
fixture; providing an enclosure having a cloth member 
thereon; placing the enclosure in the fixture; heating the 
enclosure; and removing the enclosure from the fixture. 
[0010] A fifth embodiment provides an apparatus for 
securing a security enclosure, comprising; a base upon 
which a security enclosure rests; a first stationary arm 
mounted on the base, which holds a first end of the se- 
curity enclosure; a second arm slidably mounted on the 
base; and a traversing mechanism to bias the second 
arm toward a second end of the security enclosure. 
[0011] The foregoing and other features and advan- 
tages of the invention will be apparent from the following 
more particular description of the embodiments of the 
invention. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0012] The embodiments of this invention will be de- 
scribed in detail, with reference to the following figures, 
wherein like designations denote like elements, and 
wherein: 

Fig. 1 depicts a top view of a tamper respondent 
wrap in accordance with the present invention; 

Fig. 2A depicts an electronic assembly in accord- 
ance with the present invention; 

Fig. 2B depicts the electronic assembly of Fig. 2A 
having an enclosure therearound in accordance 
with the present invention; 

Fig. 3 depicts a first step in enclosing the assembly 
of Fig. 2A within the wrap of Fig. 1 in accordance 
with the present invention; 

Fig. 4 depicts a second step in enclosing the as- 
sembly of Fig. 2A within the wrap of Fig. 1 in accord- 
ance with the present invention; 

Fig. 5 depicts a third step in enclosing the assembly 
of Fig. 2A within the wrap of Fig. 1 in accordance 
with the present invention; 

Fig. 6 depicts a fourth step in enclosing the assem- 
bly of Fig. 2A within the wrap of Fig. 1 in accordance 
with the present invention; 

Fig. 7 depicts a fifth step in enclosing the assembly 
of Fig. 2A within the wrap of Fig. 1 in accordance 
with the present invention; 

Fig. 8 depicts a graph illustrating the bending mod- 
ulus of the wrap of Fig. 1 in accordance with the 


present invention; and 

Fig. 9 depicts a clamping device used in accord- 
ance with the present invention. 
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DETAILED DESCRIPTION OF THE INVENTION 

[0013] Referring to the drawings, Fig. 1 shows a 
tamper respondent wrap or cloth 1 0 as known and used 

10 in the art. The tamper respondent cloth 10 may be a 
sheet of composite material similar to one made by a 
division of W.L. Gore (Dundee, Scotland), as described 
in a patent to MacPherson (US 5,858,500). In particular, 
the tamper respondent cloth 10 comprises a laminate 

*5 formed of a number of separate layers, including a dela- 
mination respondent layer, and a pierce and laser re- 
spondent layer. 

[0014] The respondent layers of the tamper respond- 
ent cloth 10 comprise electrically responsive line ele- 

20 ments that are disposed on a film material. The pierce 
and laser respondent layer is intended to detect efforts 
to penetrate the security enclosure by means of forming 
a small hole through the tamper respondent cloth 10. 
The delamination respondent layer is intended to detect 

25 efforts to peel the tamper respondent cloth 10 away from 
the outer surface of the inner enclosure. The delamina- 
tion respondent layer is provided with an adhesive char- 
acteristic such that peeling it away from a surface will 
damage the electrically responsive materials therein. 

30 These respondent layers are adhered together by 
means of an adhesive. Thus the tamper respondent 
cloth 10 comprises respondent film layers that are bond- 
ed together with an adhesive. Moreover, an adhesive is 
provided to retain the folded and overlapping portions 

35 upon folding. A top view of one such respondent layer 
is shown in Fig. 1. The layer includes an electrically in- 
sulating film 12, made of polyester film or other similar 
material, having a plurality of diagonally extending ink 
traces or lines 14 formed on a first and second side of 

<o the film 12 (one side shown). The lines 14 are formed 
by printing carbon loaded polyester ink on the surface 
of the film 12. The lines 14 printed on each side of the 
film 12 are then selectively connected at the edges 13 
of the film 12. The lines 14 form a plurality of continuous 

45 conductors which break easily if attempts are made to 
penetrate the delamination respondent layer or the 
pierce and laser respondent layer. 
[0015] Connection between the lines 14 and an en- 
closure monitor of the electronic assembly (described 

50 infra) is provided by an integrated ribbon cable 1 8. Like 
the lines 14, the ribbon cable 18 is formed by printing 
carbon loaded polyester ink onto a first surface of the 
layer 12. Connectors 1 6, also formed on the first surface 
of the layer 12, make the connection between the ribbon 

55 cable 18 and the lines 14. 

[0016] Fig. 2A shows an electronic assembly such as 
a cryptographic processor card 20 in accordance with 
the present invention. The cryptographic processor card 
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20 contains an encryption module 22 which carries the 
secured sensitive information, a memory 24 which 
stores a key or code necessary to access the stored in- 
formation in the encryption module 22, an erase circuit 
26 which erases the stored information in the encryption 5 
module 22 in the event the tamper respondent cloth 10 
around the cryptographic processor card 20 is 
breached, an enclosure monitor 28 which monitors the 
resistance of the lines 14 of the cloth 10 and activates 
the erase circuit 26 in the event a breach is detected, 
and a battery 30, all of which are mounted on a printed 
circuit board 32. The cryptographic processor card 20 
further includes a plurality of connecting or ribbon cables 
34 (one of which is shown), which are used to connect 
multiple enclosures to one another on a board (not 
shown), as known in the art. 

[0017] The cryptographic processor card 20 may then 
be positioned inside a housing 100 comprising for ex- 
ample a top half 102 and a bottom half 104 of a sheet 
metal box, as illustrated in Fig. 2B. The two halves 102, 
104 may be joined together, and include openings 106 
as need to insert electrical cables into the processor 
card 20. The housing 100 may be designed to provide 
a suitable surface for wrapping the tamper respondent 
cloth 10. The tamper respondent cloth 10 is then 
wrapped around the housing 100 containing the crypto- 
graphic processor card 20 in a manner similar to that of 
a gift-wrapped present, as illustrated in Fig. 3. The cloth 
10 overlaps near the middle of the cryptographic proc- 
essor card 20, on the underside of the card 20. The con- 
nectors 16 and ribbon cable 18 (Fig. 1) are wrapped 
within the cloth 10 such that the ribbon cable 18 inter- 
connects with the enclosure monitor 28 within the en- 
closure. 

[001 8] A top flap 36 at each end of the cloth 1 0 is fold- 
ed down over the ends 38 of the housing 1 00 containing 
the card 20 (one end 38 is shown in Fig. 4 for ease of 
illustration). An adhesive on the inner surface of each 
top flap 36 adheres each top flap 36 to the respective 
ends 38 for ease of assembly. As illustrated in Fig. 5, 
the connection cable 34 at the one end is folded upward 
to abut the folded top flap 36 (noting that only one end 
of the cryptographic processor card 20, the end nearest 
the encryption module 22, has the connection cable 34 
extending therefrom in the current illustration, however, 
the present invention is not intended to be limited to the 
quantity nor location of the connection cable shown). 
[0019] As illustrated in Fig. 6, the side flaps 40 at each 
end 38 of the housing 100 containing the card 20 are 
folded inward to overlap the top flap 36 at each end 38, 
and the connection cable 34 at the one end. As with the 
top flap 36, each side flap 40 includes an adhesive on 
the inner surface of each flap <*0 such that each side flap 
40 adheres to each top flap 36 at each end 38 of the 
housing 100 containing the card 20, and the connection 
cable 34 at one end 38 of the card 20, during assembly. 
Each bottom flap 42 is then folded upward to overlap 
the top 36 and side flaps 40, as well as the connection 


cable 34 (at the one end 38 of the card 20), as illustrated 
in Fig. 7. As with the top and side flaps 36, 40, each 
bottom flap 42 includes an adhesive on the inner surface 
of the flap 42 to adhere each bottom flap 42 to the con- 
nection cable 34 and/or the side and top flaps 36, 40, 
thereby forming a complete enclosure for the card 20. 
[0020] It should be noted that the present invention is 
not intended to be limited to the order of folding the 
tamper respondent cloth 10 around the card 20 de- 
scribed above. In contrast, the side flaps 40 may be fold- 
ed inward first, followed by either the top 36 or bottom 
flaps 42. Alternatively, the bottom flap 42 may be folded 
upward first, followed by either the side flaps 40 or the 
top flap 36, and so on. 

[0021] The enclosure of Figure 7, having fold lines 45 
at each end 38 thereof, is then placed in a clamping de- 
vice or fixture 46 similar to the one shown in Fig. 9. The 
clamping device 46 includes a base 48 and a plurality 
of legs 50 thereunder. A stationary clamping arm 52 is 
securely mounted to a first end of the base 48. A tra- 
versing clamping arm 54 is slidably mounted to the base 
48. A biasing or traversing mechanism 56, located at a 
second end of the base 48, is connected to the travers- 
ing clamping arm 54. The traversing mechanism 56, 
comprising a biasing screw, a hydraulic mechanism, an 
electro-mechanical sensor motor, etc., functions to bias 
the traversing clamping arm 54 toward and/or away from 
the stationary damping arm 52. 
[0022] in practice, the enclosure of Figure 7 is placed 
on the base 48 of the clamping device 46, such that one 
end of the enclosure is positioned against the stationary 
clamping arm 52. The traversing clamping arm 54 is 
then biased toward the other end of the enclosure via 
the biasing mechanism 56. 

[0023] Once the traversing clamping arm 54 of the 
clamping device 46 is adjusted such that the enclosure 
fits snugly between the traversing clamping arm 54 and 
the stationary clamping arm 52, the enclosure and 
clamping device 46 are exposed to a temperature of ap- 
proximately 40-90 °C, and preferably between 50-70 °C 
(because the ink lines 14 may begin to soften and reflow 
at temperatures above approximately 80 °C), 60 °C be- 
ing the optimal temperature, for approximately 1 hour 
(refer to the temperature chart of Fig. 8). The enclosure 
is then removed from the clamping device 46. Thereaf- 
ter, the enclosure may undergo additional processing as 
known in the art, i.e., applying a polyurethane coating, 
etc. 

[0024] Heating the tamper respondent cloth 1 0 initial- 
ly causes the layers of adhesive to soften, thereby al- 
lowing the pierce and laser respondent layer to slide 
past the delamination respondent layer in the fold areas 
such that the cloth 10 bends more easily. Upon contin- 
ued heating the adhesive cross-links or cures due to 
thermal ageing, thereby making the adhesive become 
more solidified. After removing the heat, the adhesive 
continues to harden in the folded position during cooling. 
As a result, the folded cloth 10 forming the enclosure 
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exhibits improved fold retention and reduced stress. 
And unlike the previous methods of forming enclosures, 
the cloth 10 does not come un-wrapped during process- 
ing. Accordingly, the subsequent encapsulant material, 7. 
e.g., a polyurethane coating, will not flow past the folds 5 
into the inner enclosure to damage the cryptographic 
processor card 20, as often happens with conventional 
methods. 

[0025] It should be noted that the enclosure of Figure 
7 described and illustrated herein is only one example io 
of the type of enclosure that may be use in combination 
with the present invention. The present invention is in 
no way intended to be limited to use in conjunction with 8. 
electronic assemblies of this size, shape and form. 
Rather, the enclosure may take the form of a wedge- *s 
shaped enclosure, a cuboid, a cube, etc. 

9. 

Claims 

20 

1. A method of securing an electronic assembly 
against tampering, comprising: 

wrapping the assembly in a tamper respondent 
sheet to form an enclosure for the assembly; 25 

providing overlapping portions of the sheet with 
a heat curable adhesive; 

clamping the enclosed assembly to maintain 30 
the overlapped portions of the sheet in contact 
with the adhesive; and 

heating the enclosed assembly to heat cure the 
adhesive thereby to ensure integrity of the en- 35 
closure. 

2. A method as claimed in claim 1 in which the en- 
closed assembly is heated at between 40°C and 
90°C. 40 

3. A method as claimed in claim 2 in which the en- 
closed assembly is heated at 60°C. 

4. A method as claimed in any preceding claim in 
which the enclosed assembly is heated for one 
hour. 

5. A method as claimed in any preceding claim where- 
in the tamper respondent sheet comprises two lay- so 
ers joined by an adhesive, said heating step initially 
causing softening of the adhesive joining the two 
layers to permit relative movement thereof. 

6. A method as claimed in any preceding claim where- 55 
in said wrapping step produces fold lines in the 
tamper respondent sheet material and the bending 
modulus of the sheet material decreases with tem- 


perature so that said heating step reduces any ten- 
dency of the sheet to unfold. 

A method as claimed in any preceding claim where- 
in the tamper resistant sheet comprises a flexible 
material coated with a conductive pattern, the sheet 
being formed with a ribbon cable portion, the meth- 
od comprising the step of electrically connecting the 
ribbon cable portion to an enclosure monitor within 
the electronic assembly for detecting breach or 
delamination of the sheet. 

A method as claimed in claim 7 including the step 
of forming the conductive pattern on the sheet by 
printing carbon loaded polyester ink on to a surface 
of the sheet. 

A method as claimed in any preceding claim in 
which the overlapping portions of the sheet are tem- 
porarily retained together by the adhesive prior to 
said clamping and heating steps. 
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